Apple released updates for most of their operating systems yesterday with bug fixes and critical security updates.

The new releases are:

  • iOS 18.4.1
  • iPadOS 18.4.1
  • macOS Sequoia 15.4.1
  • tvOS 18.4.1
  • visionOS 2.4.1

These updates should be installed immediately, as there is credible evidence that threat actors are actively exploiting these vulnerabilities in the wild.

One of the vulnerabilities affects CoreAudio and is triggered by the processing of a maliciously crafted audio file. Exploiting this flaw could lead to arbitrary code execution due to memory corruption. Apple addressed the issue by implementing enhanced bounds checking to prevent out-of-bounds memory access.

The second vulnerability involves Pointer Authentication. An attacker with arbitrary read and write capabilities could bypass Pointer Authentication protections, which are designed to safeguard against memory manipulation. To mitigate this risk, Apple removed the affected code segment, effectively neutralizing the exploit path.

For iOS bugfixes, the update fixes some stability issues when connected through CarPlay wirelessly. I have encountered this annoying issue, so I’m hoping the update will end the frustration.

All of the updates installed without a hitch across my MacBook Pro, iPhone and iPads.

✏️